netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-3xcm-h7jg-4xm5
GHSA-4367-pw62-mx9j
GHSA-4c2f-665c-x845
GHSA-62c8-7p5q-m59c
GHSA-mc27-8ccr-v5m9
GHSA-pfv6-3f5p-j5c6
GHSA-qhj6-7r5w-cm2f
GHSA-rpr9-6rwm-4w63
GHSA-vxrh-jfch-hqcf
This commit is contained in:
advisory-database[bot]
2024-02-17 00:32:53 +00:00
parent a5dc01fd95
commit eac6cedcda
9 changed files with 131 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/02/GHSA-3xcm-h7jg-4xm5/GHSA-3xcm-h7jg-4xm5.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3xcm-h7jg-4xm5",
"modified": "2024-02-17T00:31:38Z",
"published": "2024-02-17T00:31:38Z",
"aliases": [
"CVE-2024-21983"
],
"details": "StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 \nare susceptible to a Denial of Service (DoS) vulnerability. Successful \nexploit by an authenticated attacker could lead to an out of memory \ncondition or node reboot.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21983"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240216-0012"
}
],
"database_specific": {
"cwe_ids": [
"CWE-248"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T23:15:07Z"
}
}
advisories/unreviewed/2024/02/GHSA-4367-pw62-mx9j/GHSA-4367-pw62-mx9j.json
+1
View File
@@ -32,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-400",
"CWE-434"
],
"severity": "MODERATE",
advisories/unreviewed/2024/02/GHSA-4c2f-665c-x845/GHSA-4c2f-665c-x845.json
+7 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4c2f-665c-x845",
"modified": "2024-02-09T18:31:07Z",
"modified": "2024-02-17T00:31:38Z",
"published": "2024-02-09T03:33:11Z",
"aliases": [
"CVE-2024-22318"
@@ -32,11 +32,16 @@
{
"type": "WEB",
"url": "http://packetstormsecurity.com/files/177069/IBM-i-Access-Client-Solutions-Remote-Credential-Theft.html"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/Feb/7"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
"CWE-200",
"CWE-384"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-62c8-7p5q-m59c/GHSA-62c8-7p5q-m59c.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-62c8-7p5q-m59c",
"modified": "2024-02-10T09:30:19Z",
"modified": "2024-02-17T00:31:38Z",
"published": "2024-02-10T09:30:19Z",
"aliases": [
"CVE-2024-0596"
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-mc27-8ccr-v5m9/GHSA-mc27-8ccr-v5m9.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mc27-8ccr-v5m9",
"modified": "2024-02-17T00:31:38Z",
"published": "2024-02-17T00:31:38Z",
"aliases": [
"CVE-2024-21984"
],
"details": "StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 \nare susceptible to a difficult to exploit Reflected Cross-Site Scripting\n (XSS) vulnerability. Successful exploit requires the attacker to know \nspecific information about the target instance and trick a privileged \nuser into clicking a specially crafted link. This could allow the \nattacker to view or modify configuration settings or add or modify user \naccounts. \n\n\n\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21984"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240216-0013"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T23:15:08Z"
}
}
advisories/unreviewed/2024/02/GHSA-pfv6-3f5p-j5c6/GHSA-pfv6-3f5p-j5c6.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pfv6-3f5p-j5c6",
"modified": "2024-02-17T00:31:38Z",
"published": "2024-02-17T00:31:38Z",
"aliases": [
"CVE-2023-45918"
],
"details": "ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45918"
},
{
"type": "WEB",
"url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-06/msg00005.html"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T22:15:07Z"
}
}
advisories/unreviewed/2024/02/GHSA-qhj6-7r5w-cm2f/GHSA-qhj6-7r5w-cm2f.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-rpr9-6rwm-4w63/GHSA-rpr9-6rwm-4w63.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rpr9-6rwm-4w63",
"modified": "2024-02-10T09:30:19Z",
"modified": "2024-02-17T00:31:38Z",
"published": "2024-02-10T09:30:19Z",
"aliases": [
"CVE-2024-0595"
@@ -36,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-vxrh-jfch-hqcf/GHSA-vxrh-jfch-hqcf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vxrh-jfch-hqcf",
"modified": "2024-02-11T03:30:17Z",
"modified": "2024-02-17T00:31:38Z",
"published": "2024-02-11T03:30:17Z",
"aliases": [
"CVE-2024-25715"
],
"details": "Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-601"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-11T03:15:09Z"